CVE-2021-42867

A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...

Cross-site Scripting (XSS)

phpLiteAdmin is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of input via the index.php newRows parameter aka num or number...

CVE-2022-1191

SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96...

PT-2022-11853

Name of the Vulnerable Software and Affected Versions Hoosk version 1.8.0 Description A vulnerability exists due to a failure to check if config.php already exists in the root directory, which could let a malicious user reinstall the website. This issue is related to the /install/index.php...

CVE-2022-1191: Server-Side Request Forgery (SSRF)

SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96...

CVE-2021-43478: Undefined Security Weakness

A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in the root directory, which could let a malicious user reinstall the website...

Sourcecodester Student Attendance Management System跨站脚本漏洞

Sourcecodester Student Attendance Management System is an attendance management system used to maintain daily attendance records. A cross-site scripting vulnerability exists in Sourcecodester Student Attendance Management System version 1.0. The vulnerability stems from a lack of data validation...

PT-2022-11719

Name of the Vulnerable Software and Affected Versions DanPros htmly version 2.8.1 Description A Cross Site Scripting XSS issue exists via the Description field in the "admin/config" and "index.php" pages. Recommendations For DanPros htmly version 2.8.1, consider restricting access to the...

CVE-2021-42867: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...

Cross-Site Scripting (XSS)

nilsteampassnet/teampass is vulnerable to reflected cross-site scripting. The vulnerability exists in index.php due to improper sanitization which allows an attacker to inject and execute arbitrary scripts...

CVE-2021-45866

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

CVE-2021-45866

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

CVE-2021-45866

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

GHSA-M2WV-M5PF-284R Cross-site Scripting in teampass

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO. Someone must open a link for the Teampass Password Manager index page containing malicious payload...

Cross-site Scripting in teampass

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO. Someone must open a link for the Teampass Password Manager index page containing malicious payload...

CVE-2021-45866: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

PT-2022-11978

Name of the Vulnerable Software and Affected Versions textpattern version 4.8.7 Description The issue allows a remote and unauthenticated attacker to trigger remote code execution by uploading a webshell via Cross Site Scripting XSS in the "/textpattern/index.php" endpoint, specifically in the Bo...

PT-2022-12445

Name of the Vulnerable Software and Affected Versions Sourcecodester Student Attendance Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the couse field in the "index.php" endpoint. This allows for malicious script execution. Recommendations For...

CVE-2021-44082: Improper Neutralization of Input During Web Page Generation

textpattern 4.8.7 is vulnerable to Cross Site Scripting XSS via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request...